Need help in getting message alerts

[Edward Croft]

On the message page I am getting the following results.
In the client-local.cfg file it says:
log:/var/log/messages:10240
trigger NOTICE
trigger WARNING

log:/var/log/secure:10240
ignore "Connection closed by"

trigger BREAKIN

In hobbit-clients.cfg it says:
        LOG /var/log/messages WARNING COLOR=yellow
        LOG /var/log/messages NOTICE COLOR=red
        LOG /var/log/secure BREAKIN

Yet, nothing appears in the top half and it never changes from green.



No entries in /var/log/messages
<http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/messages>

No entries in
/var/log/secure
<http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/secure>


Full log /var/log/messages
<http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/messages>
Jan 10 13:31:40 sirona ecroft: NOTICE


Full log /var/log/secure
<http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/secure>
Jan 10 13:22:50 sirona sshd[5087]: Connection closed by
10.0.14.249
Jan 10 13:27:51 sirona sshd[5133]: Connection closed by 10.0.14.249
Jan 10 13:31:38 sirona ecroft: BREAKIN
Jan 10 13:32:52 sirona sshd[5181]: Connection closed by
10.0.14.249
Jan 10 13:37:53 sirona sshd[5227]: Connection closed by 10.0.14.249
Jan 10 13:42:54 sirona sshd[5273]: Connection closed by
10.0.14.249
Jan 10 13:47:55 sirona sshd[5319]: Connection closed by 10.0.14.249
Jan 10 13:52:56 sirona sshd[5365]: Connection closed by 10.0.14.249




-- 
If the sane say the insane are insane,
What if the sane are insane?
Would that make the insane sane?
Explains a lot in Washington!
 --E. Croft
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20080111/ad822eaa/attachment.html>